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IP interception and monitoring 

- End-to-end is better 

But it can be difficult... 

- Cost for network operators 

- Content usability for LEA 

Klarios® makes it easier... 

-A solution for day-to-day challenges 
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• Administration of users and roles 



• Reporting and logging 

• Topology management 

• Interception management 

-Warrant administration 

- Filter administration 

- Interception provisioning 



Topology Administration 




Filter Administration 
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Application IP Layer 



LI Dedicated 



ISP Equipment 



Protocol 

Analyser 


Routers 




Switches 


Sniffer 
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HUB Mode 


Network Tap 
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• Issues to keep in mind: 

- Supported applications 

- Filter functions 

- Throughput 

- Delivery formats 

- Security 

- Connection to network 

Mirroring Port Proxy Mode 
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Mediation functions 

- Integration of lAPs 

- Specific gateway Interfaces 



Internal 

Network 

Interface 




(ETSI, CALEA, SORM....) 

- Filter functions 

- Export functions 



Handover 

Interface 




Med L3lK>n 
Device 



| 

| LEMF 

■ i M a 







Version 



Total Lenght 
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Identification 



TOS 



TTL 



Protocol 



Flags Fragment Offset 

Header Checksum 



Source Address 



Destination Address 



Option + Padding 



Source Port 



Destination Port 



Sequence Number 



Acknowledgement Number 



HTTP Start Line 



Generic Headers 
Method Headers 
Entity Headers 



Message Body 



Message Trailer 





Storage 



HTTP/1.1 200 OK 

Content-Type: text/html 
<HTML><HEAD><TITLE>Google</TITLE> 

<TABLE cellSpacing=0 cellPadding=0 width="100%" border=0> 

alt=Google src="Google-Dateien/logo.gif" 



HTTP/1.1 200 OK 

Content-Type: image/gif 
logo.gif 

Cookie 

Deutschland 
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j Google - Microsoft Internet Explorer 
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Web Bilder Groups Verzeichnis Mews Ftooale Melir » 



| Google-Suche || Auf gut GIQckl | Stmhtwlr 

Suche: ® Das Web O Selten auf Deutsch O Selten aus Deutschland 



Werbunq - Unternehmensanoebote - Alles fiber Google - Google.com in English 
Machen Sie Gooole zu Ihrer Startseilel 
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ralDSGui - [Webfile - www.heise.de/newsticker/meldung/49302] 



File Windows Settings 
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Member Services 
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Europe terror measures logjammed 



© 



By Robin Oakley 

CNN European Political Editor 

Thuisday, September 8. 2005; Posted: 6:40 a n 

LONDON, England (CNN) -- Since 
the July terrorist bombings in 
London, the British government 
-- in the European Union chair 
for six months from July until 
December -- has been trying to 
put new drive behind Europe's 
counterterrorism measures. 

Rapidly, Europe's justice and home affairs 
ministers agreed to institute a Europe- 
wide evidence warrant, to impose identity 
checks on people transferring money and 
to speed up the interchange of information 
between police forces. 

But agreeing on cross-Europe measures 
is one thing. Implementing and using 
them tends to be quite another, often 
taking years. 

Afterthe Madrid bombings in March 2004, 
ministers agreed to 1 50 new anti- 
terrorism measures. Few have been put 
into practice. 

It was back in 2001 , for example, that the 



[Enter Keywords 

| Enter City \ ALL ^ | 



EDT (10:40 GMT) 



careerbuildeu 




The EU has already agreed to European- 
wide arrest warrants. 



EU intelligence 
sharing obstacles 

(2:45) 
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Why ATIS systems 



State of the art technology 

In-depth understanding of LEA requirements 

In-depth understanding of IP networks 

Reliable partner for planning, design and 
implementation 

Consultancy service over the entire project 
lifecycle 



Questions? 



